osborn 0.8.34 → 0.9.0

package/Dockerfile.sandbox

@@ -11,6 +11,8 @@ RUN apt-get update -qq && \
     ca-certificates \
     curl \
     git \
+    make \
+    g++ \
     python-is-python3 && \
     rm -rf /var/lib/apt/lists/*
 

package/dist/index.js

@@ -10,8 +10,16 @@ initializeLogger({ pretty: true, level: 'info' });
 import { setMaxListeners } from 'node:events';
 setMaxListeners(50);
 import { createServer } from 'http';
-import { existsSync, readdirSync, readFileSync, mkdirSync, writeFileSync } from 'node:fs';
-import { join } from 'node:path';
+import { existsSync, readdirSync, readFileSync, mkdirSync, writeFileSync, mkdtempSync, cpSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { spawn } from 'node:child_process';
+import { homedir } from 'node:os';
+// Resolve __dirname for this ESM module so we can find sibling files (e.g.
+// meeting-output.html) relative to the compiled JS location, NOT process.cwd().
+// In production cwd is the user's workspace; the static file lives next to dist/index.js.
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = dirname(__filename);
 import { createPatch } from 'diff';
 import { loadConfig, getMcpServers, getEnabledMcpServerNames, getVoiceMode, getRealtimeConfig, getDirectConfig, listAllClaudeSessions, getMostRecentSessionId, sessionExists, getSessionSummary, getConversationHistory, ensureSessionWorkspace, getSessionWorkspace, getMcpServerStatusList, buildMcpServersForKeys, listWorkspaceArtifacts } from './config.js';
 import { createSTT, createTTS, createRealtimeModelFromConfig, DIRECT_MODE_STT, DIRECT_MODE_TTS } from './voice-io.js';
@@ -148,6 +156,7 @@ function startApiServer(workingDir, port) {
             return;
         }
         const url = new URL(req.url || '/', `http://localhost:${port}`);
+        const syncToken = process.env.OSBORN_SYNC_TOKEN;
         if (req.method === 'GET' && url.pathname === '/sessions') {
             try {
                 const limit = parseInt(url.searchParams.get('limit') || '100', 10);
@@ -200,15 +209,35 @@ function startApiServer(workingDir, port) {
             });
             return;
         }
-        // GET /meeting-output — Output Media webpage for Recall.ai bot audio
+        // GET /meeting-output — Output Media webpage for Recall.ai bot audio.
+        //
+        // The file lives next to this compiled JS (copied by the build script from
+        // src/ to dist/). Resolve via __dirname rather than process.cwd() — in
+        // production cwd is the user's workspace, NOT the osborn package directory.
         if (req.method === 'GET' && url.pathname === '/meeting-output') {
-            const htmlPath = join(process.cwd(), 'src', 'meeting-output.html');
-            try {
-                const html = readFileSync(htmlPath, 'utf-8');
+            // Try the package-relative path first (post-build location), then fall
+            // back to source path for `tsx src/index.ts` dev runs.
+            const candidates = [
+                join(__dirname, 'meeting-output.html'), // dist/ (production)
+                join(__dirname, '..', 'src', 'meeting-output.html'), // dev: dist/ → src/
+                join(__dirname, '..', 'meeting-output.html'), // tsx run from src/
+            ];
+            let html = null;
+            let foundPath = null;
+            for (const p of candidates) {
+                try {
+                    html = readFileSync(p, 'utf-8');
+                    foundPath = p;
+                    break;
+                }
+                catch { }
+            }
+            if (html) {
                 res.writeHead(200, { 'Content-Type': 'text/html' });
                 res.end(html);
             }
-            catch {
+            else {
+                console.warn(`[meeting-output] not found in any of: ${candidates.join(', ')}`);
                 res.writeHead(404, { 'Content-Type': 'text/plain' });
                 res.end('meeting-output.html not found');
             }
@@ -268,6 +297,136 @@ function startApiServer(workingDir, port) {
             console.log('[events] SSE client connected');
             return;
         }
+        // GET /sessions/export — stream a gzipped tar of ~/.claude/projects/ to the client
+        // Optional ?workDir= query param: if present, export only that project's slug folder.
+        if (req.method === 'GET' && url.pathname === '/sessions/export') {
+            if (syncToken) {
+                const authHeader = req.headers['authorization'] ?? '';
+                if (authHeader !== `Bearer ${syncToken}`) {
+                    res.writeHead(401, { 'Content-Type': 'application/json' });
+                    res.end(JSON.stringify({ error: 'Unauthorized' }));
+                    return;
+                }
+            }
+            const projectsDir = join(homedir(), '.claude', 'projects');
+            const workDir = url.searchParams.get('workDir');
+            if (workDir) {
+                const slug = workDir.replace(/\//g, '-');
+                const slugDir = join(projectsDir, slug);
+                if (!existsSync(slugDir)) {
+                    res.writeHead(404, { 'Content-Type': 'application/json' });
+                    res.end(JSON.stringify({ error: 'Project not found', slug }));
+                    return;
+                }
+                res.writeHead(200, {
+                    'Content-Type': 'application/gzip',
+                    'Content-Disposition': `attachment; filename="claude-sessions-${slug}.tar.gz"`,
+                    'Access-Control-Allow-Origin': '*',
+                });
+                const tar = spawn('tar', ['-czf', '-', '-C', projectsDir, slug]);
+                tar.stdout.pipe(res);
+                tar.stderr.on('data', (d) => console.error('[export]', d.toString()));
+                tar.on('close', (code) => { if (code !== 0)
+                    res.destroy(); });
+                return;
+            }
+            if (!existsSync(projectsDir)) {
+                res.writeHead(404, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({ error: 'No sessions found' }));
+                return;
+            }
+            res.writeHead(200, {
+                'Content-Type': 'application/gzip',
+                'Content-Disposition': 'attachment; filename="claude-sessions.tar.gz"',
+                'Access-Control-Allow-Origin': '*',
+            });
+            // Stream tar output directly to response
+            const tar = spawn('tar', ['-czf', '-', '-C', join(homedir(), '.claude'), 'projects']);
+            tar.stdout.pipe(res);
+            tar.stderr.on('data', (d) => console.error('[export]', d.toString()));
+            tar.on('close', (code) => { if (code !== 0)
+                res.destroy(); });
+            return;
+        }
+        // POST /sessions/import — accept a gzipped tar and extract into ~/.claude/projects/
+        if (req.method === 'POST' && url.pathname === '/sessions/import') {
+            if (syncToken) {
+                const authHeader = req.headers['authorization'] ?? '';
+                if (authHeader !== `Bearer ${syncToken}`) {
+                    res.writeHead(401, { 'Content-Type': 'application/json' });
+                    res.end(JSON.stringify({ error: 'Unauthorized' }));
+                    return;
+                }
+            }
+            const targetWorkDir = url.searchParams.get('targetWorkDir');
+            const chunks = [];
+            req.on('data', (chunk) => chunks.push(chunk));
+            req.on('end', () => {
+                const body = Buffer.concat(chunks);
+                const tmpDir = mkdtempSync('/tmp/osborn-import-');
+                try {
+                    // Extract archive into temp dir
+                    const tarProc = spawn('tar', ['-xzf', '-', '-C', tmpDir]);
+                    tarProc.stdin.write(body);
+                    tarProc.stdin.end();
+                    tarProc.stderr.on('data', (d) => console.error('[import]', d.toString()));
+                    tarProc.on('close', (code) => {
+                        if (code !== 0) {
+                            res.writeHead(500, { 'Content-Type': 'application/json' });
+                            res.end(JSON.stringify({ error: 'tar extraction failed', code }));
+                            return;
+                        }
+                        try {
+                            const projectsDir = join(homedir(), '.claude', 'projects');
+                            mkdirSync(projectsDir, { recursive: true });
+                            // The archive should contain a 'projects' subdirectory
+                            const extractedProjects = join(tmpDir, 'projects');
+                            const sourceDir = existsSync(extractedProjects) ? extractedProjects : tmpDir;
+                            // Optionally remap slug: if targetWorkDir is provided, find slug(s)
+                            // that don't match the target and rename them
+                            let remapped = {};
+                            if (targetWorkDir) {
+                                const targetSlug = targetWorkDir.replace(/\//g, '-');
+                                const sourceSlugs = readdirSync(sourceDir);
+                                for (const slug of sourceSlugs) {
+                                    if (slug !== targetSlug && !slug.startsWith('.')) {
+                                        const newSlug = targetSlug;
+                                        remapped[slug] = newSlug;
+                                    }
+                                }
+                            }
+                            // Copy subdirectories into ~/.claude/projects/, merging without overwriting
+                            let filesWritten = 0;
+                            const slugsInSource = readdirSync(sourceDir);
+                            for (const slug of slugsInSource) {
+                                const effectiveSlug = remapped[slug] ?? slug;
+                                const destSlug = join(projectsDir, effectiveSlug);
+                                mkdirSync(destSlug, { recursive: true });
+                                cpSync(join(sourceDir, slug), destSlug, {
+                                    recursive: true,
+                                    force: false, // don't overwrite existing files
+                                    errorOnExist: false,
+                                });
+                                filesWritten++;
+                            }
+                            res.writeHead(200, { 'Content-Type': 'application/json' });
+                            res.end(JSON.stringify({ ok: true, filesWritten, remapped }));
+                        }
+                        catch (err) {
+                            console.error('[import] merge error:', err);
+                            res.writeHead(500, { 'Content-Type': 'application/json' });
+                            res.end(JSON.stringify({ error: 'Failed to merge sessions', detail: String(err) }));
+                        }
+                    });
+                }
+                catch (err) {
+                    console.error('[import] spawn error:', err);
+                    res.writeHead(500, { 'Content-Type': 'application/json' });
+                    res.end(JSON.stringify({ error: 'Failed to start extraction', detail: String(err) }));
+                }
+            });
+            return;
+        }
         res.writeHead(404, { 'Content-Type': 'application/json' });
         res.end(JSON.stringify({ error: 'Not found' }));
     });

package/dist/meeting-output.html

@@ -0,0 +1,32 @@
+<!DOCTYPE html>
+<html>
+<head><title>Osborn Meeting Output</title></head>
+<body>
+<script>
+  const botId = new URLSearchParams(window.location.search).get('bot_id') || 'unknown'
+
+  function connect() {
+    const protocol = window.location.protocol === 'https:' ? 'wss:' : 'ws:'
+    const ws = new WebSocket(`${protocol}//${window.location.host}/meeting-audio?bot_id=${botId}`)
+
+    ws.onmessage = async (event) => {
+      try {
+        const audioCtx = new (window.AudioContext || window.webkitAudioContext)()
+        const arrayBuffer = await event.data.arrayBuffer()
+        const audioBuffer = await audioCtx.decodeAudioData(arrayBuffer)
+        const source = audioCtx.createBufferSource()
+        source.buffer = audioBuffer
+        source.connect(audioCtx.destination)
+        source.start()
+      } catch (e) {
+        console.error('Audio playback error:', e)
+      }
+    }
+
+    ws.onclose = () => setTimeout(connect, 1000)
+  }
+
+  connect()
+</script>
+</body>
+</html>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "osborn",
-  "version": "0.8.34",
+  "version": "0.9.0",
   "description": "Voice AI coding assistant - local agent that connects to Osborn frontend",
   "type": "module",
   "bin": {
@@ -11,7 +11,7 @@
     "dev:logged": "tsx scripts/dev-logged.ts",
     "review": "tsx scripts/review.ts",
     "start": "tsx src/index.ts",
-    "build": "tsc && rm -rf dist/prompts && cp -r src/prompts dist/prompts",
+    "build": "tsc && rm -rf dist/prompts && cp -r src/prompts dist/prompts && cp src/meeting-output.html dist/",
     "room": "tsx src/index.ts --room",
     "prepublishOnly": "npm run build"
   },

package/.claude/settings.local.json

@@ -1,9 +0,0 @@
-{
-  "permissions": {
-    "allow": [
-      "Bash(ps:*)",
-      "Bash(osascript:*)",
-      "Bash(curl -s http://localhost:3000)"
-    ]
-  }
-}

package/.claude/skills/browser-apply/SKILL.md

@@ -1,114 +0,0 @@
-# Skill: Browser Apply — Step-by-Step Workday Application
-
-Automate Workday job applications interactively, one step at a time. Each step takes a screenshot, confirms what's on screen, fills the current page, and waits before proceeding.
-
-**This skill uses the Playwright MCP tools** (`mcp__playwright__browser_*`) for direct browser control — no scripts needed.
-
-## When to Use
-- Any Workday ATS application (`*.wd1.myworkdayjobs.com`)
-- Any multi-step JS-heavy job application form
-- When you want visible, confirmable progress at each step
-
-## Key Principle: Step-by-Step, Not One Big Script
-
-Do NOT write a monolithic automation script. Instead:
-1. Navigate to the URL
-2. Take a screenshot — confirm what's on screen
-3. Fill only the current step's fields
-4. Take another screenshot — confirm fields filled correctly
-5. Ask the user "Ready for next step?" before clicking Next
-6. Click Next, wait for page load, screenshot again
-7. Repeat for each step
-
-This approach catches rendering issues, unexpected fields, and errors before they cascade.
-
-## Step-by-Step Execution Pattern
-
-### Step 0 — Open the browser
-Use: `mcp__playwright__browser_navigate` with the applyManually URL
-
-Then: `mcp__playwright__browser_take_screenshot` — show the user what loaded
-
-### Step 1 — Create Account / Sign In
-Take a snapshot with `mcp__playwright__browser_snapshot` to see element refs.
-Fill fields using `mcp__playwright__browser_fill_form` or individual `mcp__playwright__browser_type` calls.
-Screenshot to confirm. Then ask user before clicking Create Account / Sign In.
-
-### Step 2 — Start Application
-If "Start Your Application" screen appears with Apply Manually button:
-Screenshot it. Click "Apply Manually" using `mcp__playwright__browser_click`.
-Screenshot after.
-
-### Step 3 — My Information
-Snapshot → fill each field → screenshot → ask user before clicking Next.
-
-Fields to fill:
-- First Name, Last Name, Phone
-- Address, City, State (dropdown), Zip
-- Work authorization: Yes
-- Sponsorship: No
-
-### Step 4 — My Experience
-Snapshot → click Add for each job entry → fill title/company/dates/description → save each → screenshot.
-Then add education entries.
-Ask user before clicking Next.
-
-### Step 5 — Application Questions
-Snapshot to see all questions. Fill each one. **Always confirm salary expectation with user before filling** — never guess. Screenshot. Ask before Next.
-
-### Step 6 — Voluntary Disclosures
-Select "I do not wish to answer" / "Prefer not to disclose" for all. Screenshot. Ask before Next.
-
-### Step 7 — Self Identify
-Fill name and date. Select disability option. Screenshot. Ask before Next.
-
-### Step 8 — Review
-Screenshot the full review page. Confirm with user before clicking Submit.
-
-### Step 9 — Confirm submission
-Screenshot the confirmation dialog. Save it.
-
-## Candidate Data (Osborn Ojure)
-
-- Email: osbornojure@gmail.com
-- Password: Workday2026!
-- First: Osborn, Last: Ojure
-- Phone: 3127185561
-- Address: 1234 N Michigan Ave, Chicago, IL 60601
-
-Jobs:
-1. Meta API Consultant at Prehype / Audos — April 2024 to Present
-2. Full Stack Developer, Freelance — January 2016 to Present
-
-Education:
-1. A.S. Information Systems
-2. B.S. Psychology
-
-## Workday data-automation-id Selector Reference
-
-| Field | Selector |
-|---|---|
-| Email | `input[type="email"]` |
-| Password | `input[type="password"]` |
-| First name | `[data-automation-id="legalNameSection_firstName"]` |
-| Last name | `[data-automation-id="legalNameSection_lastName"]` |
-| Phone | `[data-automation-id="phone-number"]` |
-| Address | `[data-automation-id="addressSection_addressLine1"]` |
-| City | `[data-automation-id="addressSection_city"]` |
-| Zip | `[data-automation-id="addressSection_postalCode"]` |
-| Job title | `[data-automation-id="jobTitle"]` |
-| Company | `[data-automation-id="company"]` |
-| Description | `[data-automation-id="description"]` |
-| Next button | `[data-automation-id="bottom-navigation-next-btn"]` |
-| Create Account | `[data-automation-id="click_filter"][aria-label="Create Account"]` |
-
-## Critical Rules
-- headless: false always (Workday renders blank in headless)
-- Confirm salary with user before every submission — never auto-fill
-- After "You already applied to this job" error — that confirms a previous submission worked
-- Use `{ force: true }` on Workday buttons — overlay click filters block normal clicks
-- Always wait for networkidle or waitForSelector after navigation before interacting
-
-## Playwright Install Location
-Run scripts from: `/Users/newupgrade/Desktop/Developer/osborn/frontend`
-(playwright is in `node_modules` there)

package/.claude/skills/markdown-to-pdf/SKILL.md

@@ -1,29 +0,0 @@
-# Skill: Markdown to PDF
-
-Export Markdown documents as formatted PDF files.
-
-## When to use
-When the user wants to create a PDF from a Markdown file, spec, or research findings.
-
-## How to execute
-
-Option 1 — Using md-to-pdf (best quality):
-```bash
-npx --yes md-to-pdf "<MARKDOWN_PATH>"
-```
-This creates a PDF alongside the source file with the same name.
-
-Option 2 — Using pandoc (if available):
-```bash
-pandoc "<MARKDOWN_PATH>" -o "<OUTPUT_PATH>.pdf" --pdf-engine=wkhtmltopdf
-```
-
-Option 3 — Using markdown-pdf:
-```bash
-npx --yes markdown-pdf "<MARKDOWN_PATH>" -o "<OUTPUT_PATH>.pdf"
-```
-
-## Output
-- Save the PDF to the session workspace (e.g., `library/{name}.pdf`)
-- Confirm the output path and file size to the user
-- If the source is spec.md, name the output `spec-export.pdf`

package/.claude/skills/pdf-to-markdown/SKILL.md

@@ -1,28 +0,0 @@
-# Skill: PDF to Markdown
-
-Convert PDF documents to readable Markdown text.
-
-## When to use
-When the user provides a PDF file path and wants to read, search, or work with its contents.
-
-## How to execute
-
-Option 1 — Using the built-in Read tool:
-The Read tool can directly read PDF files. Use `pages` parameter for large PDFs (max 20 pages per request).
-
-Option 2 — Full extraction via CLI (for better formatting or batch processing):
-```bash
-npx --yes pdf-parse-cli "<PDF_PATH>"
-```
-
-Option 3 — Using pdftotext (if available):
-```bash
-pdftotext -layout "<PDF_PATH>" -
-```
-
-## Output
-Save the converted content to the session workspace as `library/{filename}.md` with:
-- Document title and source path at the top
-- Preserved heading structure where detectable
-- Tables converted to Markdown tables where possible
-- Page numbers as section markers

package/.claude/skills/playwright-browser/SKILL.md

@@ -1,90 +0,0 @@
-# Skill: Playwright Browser Automation
-
-Automate web browser interactions — navigate pages, click buttons, fill forms, take screenshots, and extract content.
-
-## When to use
-- Navigate to a URL and interact with it
-- Click buttons or links by their text or role
-- Fill form fields and submit data
-- Take screenshots of web pages
-- Extract text or structured data from pages
-- Automate multi-step web workflows (e.g. join a room, test a UI flow)
-
-## How to execute
-
-Uses `@playwright/cli` via npx — no global install needed. Token-efficient: uses element references (e.g. `e15`) instead of pixel coordinates.
-
-### First time only — install browser binaries
-```bash
-npx playwright install chromium
-```
-
-### Step 1 — Open a URL
-```bash
-npx @playwright/cli open https://localhost:3000
-```
-
-### Step 2 — Get page structure and element references
-```bash
-npx @playwright/cli snapshot
-```
-Returns an accessibility tree with element IDs like e1, e2, e15. Use these in subsequent commands.
-
-### Step 3 — Interact with elements
-```bash
-npx @playwright/cli click e15
-npx @playwright/cli fill e3 "some text"
-npx @playwright/cli press e3 Enter
-npx @playwright/cli select e7 "optionValue"
-npx @playwright/cli check e9
-npx @playwright/cli hover e12
-```
-
-### Take a screenshot
-```bash
-npx @playwright/cli screenshot --path=/tmp/page.png
-```
-
-### Take a screenshot at a specific viewport size (mobile check)
-```bash
-npx @playwright/cli screenshot --viewport-size=375,812 --path=/tmp/page-mobile.png
-```
-Common mobile sizes: `375,812` (iPhone 14), `390,844` (iPhone 14 Pro), `412,915` (Pixel 7), `768,1024` (iPad).
-
-### Close the browser
-```bash
-npx @playwright/cli close
-```
-
-### Named sessions (persistent state across commands)
-```bash
-npx @playwright/cli -s=myflow open https://localhost:3000
-npx @playwright/cli -s=myflow snapshot
-npx @playwright/cli -s=myflow fill e3 "abc123"
-npx @playwright/cli -s=myflow click e5
-npx @playwright/cli -s=myflow close
-```
-
-## Complete example — join Osborn voice room
-```bash
-npx @playwright/cli open http://localhost:3000
-npx @playwright/cli snapshot
-npx @playwright/cli fill e3 "abc123"
-npx @playwright/cli click e4
-npx @playwright/cli screenshot --path=/tmp/osborn-joined.png
-npx @playwright/cli close
-```
-
-## Complete example — check mobile layout
-```bash
-npx @playwright/cli open http://localhost:3000
-npx @playwright/cli screenshot --viewport-size=375,812 --path=/tmp/mobile-375.png
-npx @playwright/cli close
-```
-
-## Notes
-- Runs headless by default. Add --headed to see the browser window.
-- Install browsers first if needed: npx playwright install chromium
-- Element IDs are session-scoped — run snapshot again after page changes
-- Use `--viewport-size=WIDTH,HEIGHT` to simulate mobile screen sizes (e.g. `375,812` for iPhone 14)
-- Use `--storage-state=/tmp/state.json` to save and restore session state (cookies, localStorage) across runs